AMENDMENTS 

IN THE CLAIMS 

1. (currently amended) A method for processing network management data 
received by a network management system during network monitoring, said method comprising: 

receiving network management data, and 

determining in real-time if said network management data indicates a resolution of a 
previous event generated by said network management system in response to previously 
received network management data, 

maintaining an event list, said event list comprising a severity indicator of said previous 
event , said severity indicator dependent on a event type and a device type ; 

automatically changing said severity indicator of said previous event dependent on said 
determining step, and 

then automatically removing said previous event from a memory of said network 
management system, depending on said severity indicator. 

2. (previously amended) A method as claimed in claim 1, wherein, if said network 
management data indicates said resolution of a previous event, said method further comprises 
marking said previous event as resolved. 

3. (previously amended) A method as claimed in claim 1, wherein said network 
management data is processed in response to said network management system receiving 
network management data from said network. 

4. (previously amended) A method as claimed in claim 1, said network management 
data comprising values of a monitored characteristic of a part of said network for which an event 



is generated if said monitored value exceeds a predetermined threshold, wherein said event list 
includes an unresolved previous event for said monitored characteristic, wherein said step of 
receiving network management data comprises receiving a value for monitored characteristic, 
and said step of determining comprises considering whether said monitored value has been 
below said predetermined threshold for a preceding time period, and if so determining that said 
received value indicates said resolution of said unresolved previous event. 

5. (previously amended) A method as claimed in claim 4, wherein said step of 
considering comprises, in response to receiving said network management data, comparing a 
first received value for monitored characteristic with said predefined threshold, and if the value 
is below said predefined threshold, starting a timer, said timer expiring at said end a predefined 
time period. 

6. (previously amended) A method as claimed in claim 5, wherein said step of 
considering further comprises comparing each subsequent received value for said monitored 
characteristic with said predefined threshold, and if any value exceeds said threshold canceling 
said timer. 

7. (previously amended) A method as claimed in claim 5, wherein, when said timer 
expires, determining that said monitored value has been below said predetermined threshold for 
said preceding time period. 

8. (currently amended) A method for processing data representing a monitored 
characteristic of a part of a network in a network management system, said method comprising: 

periodically receiving a value for said monitored characteristic; if a received value 
exceeds a predetermined threshold for said monitored characteristic generating an event; and 



thereafter, 

periodically considering whether the monitored value has been below said 
predetermined threshold for a preceding time period, and if so 
determining in real-time that said event is resolved 

maintaining an event list, said event list comprising a severity indicator of said previous 
event , said severity indicator dependent on a event type and a device type ; 
and 

automatically changing said severity indicator of said generated event, wherein said 
severity indicator establishes whether said event should be automatically removed from a 
memory of said network management system. 

9. (previously amended) A method as claimed in claim 8, wherein said preceding 
time period is an immediately preceding predetermined time period, and said step of periodically 
considering comprises considering whether monitored value has been below said 
predetermined threshold for said immediately preceding time period in response to each 
subsequently received value. 

10. (previously amended) A method as claimed in claim 8, wherein if said step of 
considering determines that said event is resolved, said method further comprises marking said 
event as resolved. 

1 1 . (previously amended) A method as claimed in claim 1 , said network management 
data relating to an asynchronous Trap being received by said network management system, 
wherein said step of determining comprises considering if said Trap indicates said possible 
resolution of an event in an event log. 



12. (previously amended) A method as claimed in claim 11, wherein if said Trap 
indicates said possible resolution of an event in an event log, said step of determining further 
comprises considering whether said event log includes a previously received event that is 
resolved by said Trap. 

13. (cancelled without prejudice) A method for processing data received in an 
asynchronous Trap by a network management system, the method comprising: receiving a Trap 
from the network; automatically determining if the received Trap is a reportable condition, and if 
so considering if the Trap indicates the possible resolution of a event in an event log, and if so 
further considering in real-time if the Trap indicates the possible resolution of a further event in 
the event log. 

14. (cancelled without prejudice) A method as claimed in claim 1, wherein the 
method processes network management data previously received by the network management 
system and stored in the memory. 

15. (cancelled without prejudice) A method as claimed in claim 14, wherein the step 
of receiving network management data comprises receiving event data relating to an event 
stored in the memory, in response to a scan of previously generated events stored and included 
in an event log. 

16. (cancelled without prejudice) A method as claimed in claim 15, wherein the event 
data relates to a recurring event and includes the time of the last occurrence of the event. 

17. (cancelled without prejudice) A method as claimed in claim 16, wherein the step 
of determining comprises comparing the present time with the time of the last occurrence of the 



event, and, if the time difference is greater than a predetermined time interval, determining that 
the event is resolved. 

18. (cancelled without prejudice) A method as claimed in claim 17, wherein if the 
step of determining determines that the event is resolved, the method further comprises marking 
the recurring event as resolved. 

19. (currently amended) A method for processing event data generated by a 
network management system during the monitoring of a network, said method processing event 
data relating to events previously generated by said network management system a plurality of 
times and which may be entered in the event log as a recurring event, said method comprising! 

maintaining said event log, said event log comprising a plurality of severity indicators,. 
said severity indicator dependent on a event type and a device type ; 

determining in real-time if an event has already been logged a predetermined number of 
times in said event log, and if so 

automatically identifying said event; and 

considering whether the condition which caused event to be generated has occurred in a 
preceding time period. 

20. (previously amended) A method as claimed in claim 19, wherein, if said step of 
considering determines that said condition which caused said event to be generated has not 
occurred in the preceding time period, determining said event to be resolved. 

21. (previously amended) A method as claimed in claim 20, further comprising 
marking said event in said event list as resolved. 



22. (currently amended) A computer readable medium including a computer 
program for processing network management data received by a network management system 
during the monitoring of a network; the program comprising: 

a program step for receiving network management data and for determining in real-time 
if said network management data indicates a resolution of a previous event generated by the 
network management system in response to previously received network management data, 

maintaining an event list, said event list comprising a severity indicator of said previous 
event , said severity indicator dependent on a event type and a device type ; 

automatically changing said severity indicator of said previous event dependent on said 
determining step, 

and then automatically removing said previous event from a memory of the network 
management system, depending on said severity indicator. 

23. (currently amended) A network management system for processing network 
management data received during a monitoring of a network, said system comprising: 

a processor for receiving network management data and determining in real-time if said 
network management data indicates a resolution of a previous event generated by said network 
management system in response to previously received network management data, 

maintaining an event list, said event list comprising a severity indicator of said previous 
event , said severity indicator dependent on a event type and a device type ; 

automatically changing said severity indicator of said previous event dependent on said 
determining step, and then 

automatically removing said previous event from a memory of the network management 
system, depending on said severity indicator. 

24. (previously amended) A network management system as claimed in claim 23, 



wherein said memory is configured to store data relating to events generated by said network 
management system, wherein if said processor determines that received network management 
data indicates said resolution of a previous event stored in said memory, said processor 
updates said memory to mark said previous event as resolved. 

25. (previously amended) A network management system as claimed in claim 24, 
further comprising means for presenting an event list of generated events to a user. 



